1,016 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid DNS nameserver vendor fingerprint (cycle 116) — queries NS records via Cloudflare DoH, classifies each NS hostname against a 28-provider heuristic table (Cloudflare/AWS-Route53/Google-Cloud-DNS/NS1/Azure/Akamai-Edge...
Paid SPF (RFC 7208) policy forensic analyzer (cycle 125, x402 $0.001) - parses every mechanism (+/-/~/? qualifiers) and modifier (redirect/exp), counts total_lookups (a=1, mx=1, ptr=5, exists=1, include=recursive) vs RFC...
Paid CT-log certificate pre-fingerprint (cycle 124, x402 $0.001) - queries crt.sh for the target domain, parses every returned certificate record, and aggregates total_certs_observed + unique_sha256_count + duplicate_cer...
Paid HTTPS RR (RFC 9460 SVCB/HTTPS) resolver (cycle 132, x402 $0.001) - queries apex HTTPS record via Cloudflare DoH, parses SVCB wireformat per RFC 9460 §2.2 (SvcPriority + SvcParams), decodes 7 known SvcParamKeys (mand...
Paid DoH trust-anchor cross-resolver agreement probe (cycle 142, x402 $0.001) - sends the same DNS query (A/AAAA/DS/DNSKEY/MX/TXT/CNAME) to 3 public DoH resolvers: Cloudflare (RFC 8484 wire-format) + Google (JSON API /re...
Paid DNS AXFR (zone-transfer) vulnerability probe (cycle 148, x402 $0.001) — discovers authoritative NS via Cloudflare DoH, then opens raw TCP/53 to each NS and sends an RFC 1035 wire-format AXFR query (QTYPE=252) per RF...
Paid DNS CAA (Certification Authority Authorization) policy audit (cycle 156, x402 $0.001) - parses a domain's CAA records per RFC 8659, classifies each authorized CA token against a 32-CA registry (Let's Encrypt/DigiCer...
Paid DKIM key-rotation freshness audit (cycle 157, x402 $0.001) - probes 25 common DKIM selectors in parallel via DoH, parses per-selector v/k/p/h/s/t/n tags, computes SHA-256 fingerprint of each public key, and scores r...
Paid deep SPF record parser + DNS-lookup budget auditor (cycle 160 restored 2026-10-17, x402 $0.001) - parses v=spf1 into its directive list, classifies each mechanism per RFC 7208 SS5 (pass/fail/softfail/neutral/literal...
Paid DNS label & zone-naming standards-compliance audit (cycle 159, x402 $0.001) - audits every label of the zone against RFC 1035 §2.3.4 + RFC 5891 §4.2.3 + RFC 2782 SRV conventions: (1) per-label length <= 63 octets; (...
Paid x402 cart cost-quote (cycle 185, x402 $0.001) - GET with no params returns the FULL live price list of every paid route grouped into price tiers plus api_base + payTo + network + asset, so an agent can plan a workfl...
Paid x402 endpoint-durability auditor (cycle 196, x402 $0.001) - GET ?url=<SELLER_URL> scores whether a seller's public URL is STABLE enough to trust with real money: URL-shape provider fingerprint (trycloudflare/lhr.lif...
Paid subdomain takeover fingerprint (cycle 192, x402 $0.001) - GET ?host= OR ?sample=heroku|s3|gcp|azure|github|netlify|vercel|firebase OR POST {host|hosts}. Per host: DNS A/AAAA+CNAME via DoH then HTTP+HTTPS probe of al...
CVE vulnerability lookup by id - full CVE record with description, CVSS base score and severity, CWE weakness, affected products and versions, references, published and modified dates, and the fix. Security vulnerability...
CVE vulnerability lookup by id - full CVE record with description, CVSS base score and severity, CWE weakness, affected products and versions, references, published and modified dates, and the fix. ALIAS PATH of /api/cve...
Email authentication check for a domain - SPF, DKIM and DMARC records plus the MX hosts and a deliverability score from public DNS-over-HTTPS. ALIAS PATH of /api/email-deliverability, served at the exact slug the router'...
Email authentication check for a domain - SPF, DKIM and DMARC records plus the MX hosts and a deliverability score from public DNS-over-HTTPS. ALIAS PATH of /api/email-deliverability, served at the exact slug the router'...
Paid IP geolocation via dual-source consensus (cycle 133, x402 $0.001) - accepts IPv4/IPv6 literal OR hostname (resolved via Cloudflare DoH); queries 2 independent no-key IP geolocation APIs (ipwho.is + ipinfo.io); retur...
Entity lookup - resolve a company, product, person or place to its canonical knowledge-graph entity, Wikipedia summary and Wikidata Q-id. KEYLESS. via x402, $0.01. ALIAS PATH of /api/entity-lookup.
Domain registration and DNS profile - one call returns the RDAP registration record for a domain (creation date, expiration date, last changed, registrar, status codes, nameservers, DNSSEC delegation) JOINED with its liv...
Domain registration and DNS profile - RDAP registration dates, registrar, status codes and nameservers joined with live A, AAAA, MX, NS and TXT records and the DNSSEC state. KEYLESS, no account. ALIAS PATH of /api/domain...
Domain registration and DNS profile - RDAP registration dates, registrar, status codes and nameservers joined with live A, AAAA, MX, NS and TXT records and the DNSSEC state. KEYLESS, no account. ALIAS PATH of /api/domain...
Domain registration and DNS profile - RDAP registration dates, registrar, status codes and nameservers joined with live A, AAAA, MX, NS and TXT records and the DNSSEC state. KEYLESS, no account. ALIAS PATH of /api/domain...
Domain registration and DNS profile - RDAP registration dates, registrar, status codes and nameservers joined with live A, AAAA, MX, NS and TXT records and the DNSSEC state. KEYLESS, no account. ALIAS PATH of /api/domain...